Behavioral task
behavioral1
Sample
9913504a74de096106cb5478e8e93d11.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9913504a74de096106cb5478e8e93d11.exe
Resource
win10v2004-20220812-en
General
-
Target
9913504a74de096106cb5478e8e93d11.exe
-
Size
175KB
-
MD5
9913504a74de096106cb5478e8e93d11
-
SHA1
f0a750810ffb64949163d5ee53602e232138ad1c
-
SHA256
354437133a6172ccd7dc61f717030321be96fa478a4b0736edf63d6badd91db8
-
SHA512
4093fecbef945508596c4041a3219c1316bdbadec0c2440759151c76a5a2d80dc9a1f1bb8643a9fa402faba2208a391ac5982fcf642a4b908006e9c273ba2299
-
SSDEEP
3072:jxqZWZxamUaY3hvvxljrh7eL7F7hoLxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0J:1qZZhvvn3G7h
Malware Config
Extracted
redline
Pto100TraF333
82.115.223.15:15486
-
auth_value
d4c53e9109a4b130f5246d494cd30e4d
Signatures
-
Redline family
Files
-
9913504a74de096106cb5478e8e93d11.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ